
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/CE7287309A9811EBAC99AD22C4F9AE02.roa
File: CE7287309A9811EBAC99AD22C4F9AE02.roa (raw, json)
Hash identifier: ytjO5Xi8YzAYm/HJYiXYe8ySsjXr7Gk7Uu4hZdXaaG0=
Subject key identifier: 98:0B:B4:14:5D:58:44:2B:CB:E3:31:DB:51:0A:9E:C5:16:86:78:BD
Certificate issuer: /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Certificate serial: 06C3
Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/CE7287309A9811EBAC99AD22C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:57:55 +0000
ROA not before: Fri 28 Mar 2025 23:24:03 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141773
IP address blocks: 103.163.210.0/23 maxlen: 23
103.163.210.0/24 maxlen: 24
103.163.211.0/24 maxlen: 24
2001:df6:2780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Validity
Not Before: Mar 28 23:24:03 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a429c2-a849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:fb:ff:f1:9e:0a:c1:de:22:c1:99:e5:4c:
22:39:4b:5b:93:74:5c:eb:d1:4f:3a:83:48:32:98:
e3:7f:9d:5f:3f:d2:69:7c:ba:39:e4:2f:ff:b4:c7:
62:da:cf:80:6d:9c:2c:74:78:1f:e6:ba:60:ff:71:
5e:6b:c6:54:ba:d6:ca:5f:03:f8:90:36:35:04:d3:
3f:66:a1:9d:21:e8:dc:34:89:4f:4e:2f:5a:71:d8:
fd:15:8e:20:aa:72:6d:68:6e:d2:e8:6b:aa:72:48:
21:2d:cf:69:f7:eb:90:ff:07:21:2b:d0:af:3b:f1:
92:e1:78:61:85:c7:01:cc:d0:9c:d2:a4:29:5e:77:
25:ad:f0:ed:1f:92:5d:9f:79:c6:68:99:c6:4b:04:
bb:51:12:a1:b7:f6:25:9a:52:30:fc:0d:54:6d:33:
65:ea:24:7a:c5:fa:39:25:aa:3d:aa:da:54:8e:29:
ed:d4:69:2e:c8:b1:bb:1f:62:fe:ff:77:7b:25:f5:
be:6e:a2:56:2e:2e:80:06:e8:8a:0f:d6:50:31:b7:
a5:49:a7:2a:97:09:57:1a:43:d8:fa:d5:8c:23:92:
85:c3:e2:f7:61:ed:43:05:ba:9c:9d:90:8c:47:b9:
15:0b:be:1e:17:b1:b1:8f:26:32:db:3b:a6:62:46:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0B:B4:14:5D:58:44:2B:CB:E3:31:DB:51:0A:9E:C5:16:86:78:BD
X509v3 Authority Key Identifier:
keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/CE7287309A9811EBAC99AD22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.210.0/23
IPv6:
2001:df6:2780::/48
Signature Algorithm: sha256WithRSAEncryption
63:65:76:70:8e:0a:84:c4:41:60:f5:57:29:bf:68:9a:bf:29:
b3:15:1b:82:f3:ac:06:98:27:4e:d8:89:0f:86:30:fb:96:1d:
fb:32:dd:ef:90:fe:88:20:cd:89:bd:ba:f4:57:4b:ce:14:0e:
1b:0a:b3:dc:ba:37:b4:e0:79:e7:81:b0:ff:1d:9a:ca:e9:f1:
df:6c:54:3e:32:41:0f:1f:52:4c:10:cf:b4:f1:d7:2b:7b:bb:
cc:3f:c4:55:3b:53:53:7f:e6:d3:93:d7:c7:cb:3e:36:ed:84:
6e:aa:9f:55:06:c1:6f:22:e9:cf:22:1f:10:57:e5:b6:d5:31:
cb:fb:85:c7:0a:7f:42:e3:fc:70:d6:b1:7a:56:17:d8:3f:a6:
49:1f:67:54:d7:45:d0:84:d7:ce:12:67:76:1b:cb:d2:98:f1:
df:1c:7a:40:e7:a6:bc:5d:69:a5:cd:4d:df:49:c5:6b:c7:c1:
61:ec:3e:a1:6c:89:b2:a2:6a:c1:54:d6:8f:38:52:e3:c8:7d:
32:a0:c4:ba:14:29:eb:23:9b:cd:bf:ea:1d:7e:96:ce:aa:eb:
da:73:40:26:3f:a5:79:fd:46:a4:98:d4:ea:d8:a3:55:a0:2c:
46:cf:9b:35:98:ea:af:d2:70:52:0f:72:08:f8:b2:06:7d:39:
94:73:d5:13
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U3Q0ExMTAvBgNVBAUTKEZGQjUwM0YyMDIzMjBDRDg2OTczQUZFNjFBMTZGQkI1
QzZGMjhENjQwHhcNMjUwMzI4MjMyNDAzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjljMi1hODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZb7//GeCsHeIsGZ5UwiOUtbk3Rc69FPOoNIMpjjf51fP9JpfLo55C//tMdi
2s+AbZwsdHgf5rpg/3Fea8ZUutbKXwP4kDY1BNM/ZqGdIejcNIlPTi9acdj9FY4g
qnJtaG7S6GuqckghLc9p9+uQ/wchK9CvO/GS4XhhhccBzNCc0qQpXnclrfDtH5Jd
n3nGaJnGSwS7URKht/YlmlIw/A1UbTNl6iR6xfo5Jao9qtpUjint1GkuyLG7H2L+
/3d7JfW+bqJWLi6ABuiKD9ZQMbelSacqlwlXGkPY+tWMI5KFw+L3Ye1DBbqcnZCM
R7kVC74eF7GxjyYy2zumYkYnawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJgLtBRd
WEQry+Mx21EKnsUWhni9MB8GA1UdIwQYMBaAFP+1A/ICMgzYaXOv5hoW+7XG8o1k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTdDQS8wMDNERTA2MDlB
OTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeUROaHBjNl9tR2hiN3RjYnlq
V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL183VUQ4Z0l5RE5ocGM2X21HaGI3dGNieWpXUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0U3Q0EvMDAzREUwNjA5QTkwMTFFQjg5Nzk3MDQ5QzRGOUFFMDIvQ0U3Mjg3MzA5
QTk4MTFFQkFDOTlBRDIyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6PSMA8EAgACMAkDBwAgAQ32J4AwDQYJKoZIhvcNAQELBQADggEB
AGNldnCOCoTEQWD1Vym/aJq/KbMVG4LzrAaYJ07YiQ+GMPuWHfsy3e+Q/oggzYm9
uvRXS84UDhsKs9y6N7TgeeeBsP8dmsrp8d9sVD4yQQ8fUkwQz7Tx1yt7u8w/xFU7
U1N/5tOT18fLPjbthG6qn1UGwW8i6c8iHxBX5bbVMcv7hccKf0Lj/HDWsXpWF9g/
pkkfZ1TXRdCE184SZ3Yby9KY8d8cekDnprxdaaXNTd9JxWvHwWHsPqFsibKiasFU
1o84UuPIfTKgxLoUKesjm82/6h1+ls6q69pzQCY/pXn9RqSY1OrYo1WgLEbPmzWY
6q/ScFIPcgj4sgZ9OZRz1RM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:37 2026 by rpki-client